Talus Process Monitor is a behavioral ransomware detection and response agent for Linux servers. Built in Rust with eBPF, it watches process behavior in real time — file encryption bursts, mass renames, and abnormal syscall patterns — and isolates the offending process before files are lost. It is offline-first: no cloud dependency and no data leaves the host, making it suitable for air-gapped and regulated environments.